CVE-2019-6528

The CVE-2019-6528 issue affects PSI GridConnect Telecontrol Gateway and Smart Telecontrol Unit family, specifically IEC104 Security Proxy and Telecontrol Gateway variants. The root cause is improper neutralization of input during web page generation, allowing a browser to interpret input as activ...

PSI GridConnect Telecontrol

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PSI GridConnect GmbH formerly known as PSI Nentec GmbH Equipment: Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy Vulnerability: Cross-site Scripting 2. RISK EVALUATION...